Privacy policy
Last updated 16 October 2026
Neza helps you track your money and pay down debt. This page explains what we collect, why, who helps us run the service, and the rights you have under UK data protection law (UK GDPR and the Data Protection Act 2018).
Who we are
Neza is made by the Neza team in the United Kingdom, which is the data controller for your information. Contact: support@msapele.com.
What we collect
| Data | Why |
|---|---|
| Email address and password (stored only as a secure hash) | To create your account, sign you in, verify your email and reset your password. |
| What you add: accounts, balances, transactions, categories, debts, payments, subscriptions, notes, your preferred name and settings | To provide the app. Neza does not connect to your bank; everything comes from what you type in. |
| Confirmation that you are 18+ and accepted the terms, with the date and IP address | To show we have your agreement. |
| Device name, a random device ID, sign-in times, IP address and browser or app details for each signed-in device | To keep your account secure, list your signed-in devices and let you sign them out. |
| A record of account actions (for example "debt added", "password changed") | Security, fixing problems and preventing misuse. |
We do not use advertising, tracking or third-party analytics, and we do not sell your data.
Our legal basis
We process your data to provide the service you signed up for (contract), and to keep it secure and prevent misuse (legitimate interests).
Who helps us run Neza
| Provider | What they do | Where |
|---|---|---|
| Google Cloud | Runs the Neza server | London, UK |
| Supabase | Database where your data is stored | Frankfurt, EU |
| Resend | Sends account emails (verification, password reset) | United States |
| Google Gemini | Writes your weekly encouragement message | United States |
For the weekly message, Gemini only receives general facts such as "paid off 40% of one debt" and "logged money on 5 of the last 7 days". It never receives your name, email, amounts, account or debt names, or notes.
Where data leaves the UK, it goes to the EU (covered by UK adequacy regulations) or to the United States under the UK–US Data Bridge or the UK International Data Transfer Addendum.
On your phone
Payment reminders are scheduled by your iPhone itself; we do not send them. Your sign-in token is kept in the iPhone Keychain.
How long we keep it
We keep your data while you have an account. When you delete your account in the app (Profile → Delete account), your data is deleted immediately. We keep only the security record of account actions, with your identity removed. Database backups held by our provider expire within 7 days, and server logs (which include IP addresses) are kept for 30 days.
Your rights
You can ask to access, correct, delete or receive a copy of your data, or object to how we use it. You can edit or delete most of it in the app yourself, or email support@msapele.com. We reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Neza is for people aged 18 and over in the UK.
Changes
If we change this policy, we will update the date above and tell you in the app if the change is significant.